Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/HRLaNnuJU2hgCvHG1UhLxuXuAXc.roa
File: HRLaNnuJU2hgCvHG1UhLxuXuAXc.roa (raw, json)
Hash identifier: NFijanHb1D3KgtaKtNpRwIoglAnMR+vsJaz0FE1/XDA=
Subject key identifier: 1D:12:DA:36:7B:89:53:68:60:0A:F1:C6:D5:48:4B:C6:E5:EE:01:77
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 018608493840F9FACEB6869452361EE92AB4
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/HRLaNnuJU2hgCvHG1UhLxuXuAXc.roa
Signing time: Tue 31 Jan 2023 14:44:21 +0000
ROA not before: Tue 31 Jan 2023 14:44:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198938
IP address blocks: 95.169.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:49:38:40:f9:fa:ce:b6:86:94:52:36:1e:e9:2a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 31 14:44:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d12da367b895368600af1c6d5484bc6e5ee0177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:60:55:7a:13:88:5e:26:f6:15:5f:ca:8a:
82:0f:8d:14:11:ed:ad:e2:77:3b:9b:84:fd:42:b6:
3e:56:84:09:c8:79:62:fc:6c:12:4f:07:f0:43:70:
d1:ad:9b:5c:a6:b7:96:19:c4:99:62:28:a7:98:9c:
62:3e:90:ea:d0:d5:69:0a:77:7b:6c:ff:a6:83:23:
96:3d:bb:87:4c:a6:85:31:20:7a:42:8c:57:d0:e1:
d4:59:c1:75:51:c6:b2:0e:0c:58:65:2e:23:4b:d3:
bf:e0:52:94:81:7a:0d:98:89:03:ef:79:cd:ea:00:
cc:4d:b3:c8:08:52:f5:ae:e1:29:63:94:97:dd:5b:
ce:ee:d8:4d:03:de:3d:f2:12:0a:70:79:a1:ea:8a:
a7:2e:85:09:c7:f0:a3:be:df:51:91:f5:f1:d2:9d:
8e:ae:96:76:45:52:c6:60:8e:f5:2c:03:0c:62:cd:
24:b4:dc:2b:17:03:f3:26:1c:9d:54:30:5d:6e:d2:
26:1a:96:7b:93:1f:ed:d4:1f:f1:36:32:fa:1a:5a:
ab:72:3f:92:23:b8:41:46:d6:2d:fe:58:67:ad:88:
f7:e2:09:89:46:8e:cd:6a:4d:1f:1d:60:41:c6:5d:
cd:b0:15:fd:2d:9e:6f:c2:df:81:40:89:b7:16:3d:
8a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:12:DA:36:7B:89:53:68:60:0A:F1:C6:D5:48:4B:C6:E5:EE:01:77
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/HRLaNnuJU2hgCvHG1UhLxuXuAXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.193.0/24
Signature Algorithm: sha256WithRSAEncryption
45:8c:c5:eb:b8:3d:b6:a4:ff:eb:4f:f3:42:11:15:ef:9d:3f:
eb:40:ae:5a:c1:b9:76:03:fb:4b:31:f0:81:bc:6f:32:06:e1:
42:29:8b:84:c8:d7:25:35:60:26:38:64:b1:73:94:43:fb:b4:
3e:2e:90:d2:88:35:92:4e:1c:6a:c0:b6:42:01:c5:52:74:a0:
7a:37:ee:dc:e3:56:e4:60:f6:9f:81:87:c5:55:1d:94:b7:4d:
cf:c7:bc:92:23:99:94:b4:fb:9c:c5:98:77:4d:70:b6:b1:a1:
80:0d:a2:71:61:8a:38:82:0c:d4:0d:1c:b6:bb:52:5b:75:ed:
af:77:96:22:af:72:dc:94:77:da:97:dc:22:59:66:ac:4c:26:
47:1b:63:bb:96:5e:13:eb:71:2e:3e:64:44:de:7c:31:67:c7:
00:b9:5b:eb:d9:b5:9d:b1:16:a1:92:f8:9f:53:73:04:43:6f:
3f:5f:5e:61:50:d7:b7:b3:db:12:af:39:60:bb:4e:75:c3:2f:
c3:e0:9c:7a:0d:ae:04:bc:f9:68:b7:65:9b:af:db:f5:1c:53:
ea:5b:07:23:bb:87:2c:c6:79:54:30:41:dc:a7:4d:5a:59:59:
37:a1:19:84:6a:81:3c:fb:d5:58:54:c5:53:67:7c:fc:13:8d:
d4:c7:1b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org